Static task
static1
Behavioral task
behavioral1
Sample
5c43357a6a83039f911f12055c3c091f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5c43357a6a83039f911f12055c3c091f.exe
Resource
win10v2004-20231222-en
General
-
Target
5c43357a6a83039f911f12055c3c091f
-
Size
119KB
-
MD5
5c43357a6a83039f911f12055c3c091f
-
SHA1
1376400bcccc1ba3d5e841c580293f731dc29bfa
-
SHA256
75e2910f87bd02de2914b31c74eccd204912485e2b8365cafd0ce964bd2b0f33
-
SHA512
65f95b8e6ef308bdc3890b0622cf8e129a3e3730486c25890cdb296485e6ea0344572a842a64135c6aaf881d3b5eb2ae8f6634d06ca8aa6620567ea5a01f5e4f
-
SSDEEP
3072:wJJrL8XzYAiluXeea+ng44lN57fXYC4ZFSm8:sGzYAiPe415DoZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c43357a6a83039f911f12055c3c091f
Files
-
5c43357a6a83039f911f12055c3c091f.exe windows:4 windows x86 arch:x86
0b92bac77f66cceca2e3c6233545e519
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetFileInfoA
DragQueryFileA
SHFileOperationA
SHGetFolderPathA
shlwapi
SHQueryInfoKeyA
SHDeleteValueA
SHQueryValueExA
SHSetValueA
version
GetFileVersionInfoA
VerInstallFileA
VerQueryValueA
user32
GetKeyboardState
TranslateMDISysAccel
GetActiveWindow
GetKeyboardLayoutNameA
SystemParametersInfoA
SetWindowPlacement
DrawMenuBar
DeleteMenu
DestroyMenu
GetSystemMetrics
GetWindowRect
GetCursor
ReleaseCapture
KillTimer
CharNextW
EmptyClipboard
gdi32
RestoreDC
GetDCOrgEx
advapi32
RegDeleteKeyA
RegCreateKeyA
RegQueryValueExA
GetUserNameA
ole32
CreateStreamOnHGlobal
MkParseDisplayName
CoTaskMemFree
CLSIDFromProgID
CoCreateInstanceEx
kernel32
VirtualAllocEx
GetThreadLocale
LoadLibraryA
GetProcAddress
RaiseException
GlobalAlloc
VirtualQuery
LocalReAlloc
GetOEMCP
ExitThread
GetFullPathNameA
GetModuleHandleA
GetCurrentThread
GetACP
InitializeCriticalSection
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ